MENU

Privacy policy

  1. INTRODUCTION

Brussels Expo appreciates your interest in its products, services, and website. We want you to know how we collect, process, and store your personal data, which we strive to do in accordance with your rights. We also want you to be informed of these rights. Therefore, we invite you to carefully read this B2C Privacy Policy (hereinafter, the “Policy”).

This policy is established by the non-profit association Parc des Expositions de Bruxelles, (hereinafter “Brussels Expo”, “We” or“the Data Controller”“), having its registered office at B-1020 Brussels, Place de Belgique 1 and registered with the Crossroads Bank for Enterprises under number 0406.655.573, in order to comply with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”).

Our mission is to foster and develop a hub for meetings and exchanges in order to promote economic, commercial, industrial, scientific, cultural, and leisure activities, particularly through the territory and various buildings granted to us by the City of Brussels. We also have decision-making power in the selection of events organized.

From this position stems an observation regarding our compliance with the GDPR when processing your data, which varies depending on the circumstances. When a data subject orders an access ticket to an event, they are linked to both Brussels Expo and the event organizer. For the data we collect for ticketing purposes, Brussels Expo and the event organizer each act as separate data controllers. However, when Brussels Expo collects data that goes beyond what is necessary for managing its ticketing system and at the specific request of the organizer, Brussels Expo then acts as a data processor on behalf of that organizer.

This privacy policy does not cover data processing carried out by Brussels Expo as a data processor on behalf of an event organizer, which is governed by the privacy policy of the organizer in question. For your complete information, you are encouraged to review our privacy policy, on the one hand, and that of the organizer of the event you wish to attend, on the other.

 

  1. ESSENTIAL CONCEPTS

For the purposes of this Policy, the following definitions apply:

  • “Data subject“, any natural person who can be identified, directly or indirectly, by means of information.

For example: visitors to Brussels Expo, people who complete contact forms on one of our websites, people who buy a ticket for an event organized on our site or a parking ticket, any other person whose personal data is communicated to us, etc.

  • “personal data” or “data“, any information relating to an identified or identifiable natural person.

 

For example : name, surname, photo, national registration number, email address, customer number, employee number, etc.

  • “processing of personal data“, any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means.

For example : collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or interconnection, restriction, erasure or destruction.

  • “data controller”, the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing. In this case, it is Brussels Expo.

 

  • “processor”, the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • “Third party”, any natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  • “recipient”, the natural or legal person, public authority, agency or any other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of such data by those public authorities shall comply with the applicable data protection rules according to the purposes of the processing.

 

  1. WHAT PERSONAL DATA DO WE PROCESS? AND BY WHAT MEANS DO WE ACCESS IT?

 

  • COLLECTION METHODS
  1. Direct collection

This Policy covers the processing of personal data carried out by Brussels Expo in the context of all its activities, namely trade fairs and exhibitions, congresses, conferences, exhibitions, concerts, festivals and other events, in particular through one of the following means:

 

  1. Indirect collection

It is also possible that some of your personal data may be communicated to us indirectly, for example when you buy or receive a gift card or when you benefit from a VIP ticket.

In these kinds of scenarios, it is therefore possible that the information we have about you was provided to us by third parties, and not directly by you.

 

  • CATEGORIES OF DATA PROCESSED

 

Ticket purchases are reserved for legal entities and natural persons with the legal capacity to enter into a contract or, where applicable, who have received the necessary authorization from their parents or guardians (or any person exercising parental authority).

The data we collect and process is that which you voluntarily provide to us or to one of our processor or partners. For certain order-related transactions, you may be required to provide your data to third-party partners through their own services, specifically during payment processes. We will not have access to this data, as its collection and processing are governed by the terms and conditions of these third parties. We encourage you to review their terms and conditions before providing your data.

  1. As part of an event access pass and/or a parking ticket

When you order an access pass for the first time to an event, we offer you the choice of ordering with or without creating an account. In both cases, we collect:

  • Name, surname: mandatory identification data;
  • Sex: only if necessary due to a body search at the entrance to an event;
  • Language: information needed to facilitate communication with you;
  • Email address: mandatory data allowing us to communicate with you by email and send electronic tickets;
  • Telephone number: mandatory information that allows us to communicate with you in case of any problem related to the event; this information will under no circumstances be used for any other reason;
  • Date of birth: mandatory data which allows us to verify the age of our customers and to avoid selling to minors when an event is not aimed at a minor audience (for example an erotic fair); it is also useful to have an overall view of the age groups of people who attend each event, in order to adapt our strategy and our programming;
  • Postal code and country: for statistical purposes;
  • Any other data: the rationale justifying any additional request will be formulated at the time of collection.

 

  1. As part of a gift card

When ordering a gift card, the following information is also collected regarding the recipient:

  • Name and surname (mandatory identification data);
  • Email address (mandatory data to allow communication with the recipient and to send them the card);
  • Possibly the data contained in the personal message addressed to him/her, communicated by the purchaser of the gift card.

 

  1. As part of an event

If Brussels Expo installs Wi-Fi and visual sensors to track visitor movements during an event (after encryption), you will be informed of this data processing at the event entrance via an information panel. This processing is based on the legitimate interests of Brussels Expo, the organizers, exhibitors, and our visitors; the aim is to improve the quality of the event by optimizing crowd management (reduced waiting times, adaptation of facilities, improved exhibitor visibility, better communication based on visitor numbers, etc.). This processing is carried out, among other things, using equipment from third-party companies.

If applicable, the data collected consists of, firstly, the MAC addresses of your mobile device, which are encrypted almost immediately, and secondly, images from visual sensors that do not allow for visitor identification (blurry, gray images).

This data is encrypted, aggregated, and used to generate a statistical report. You can, of course, object to this processing by registering your MAC address on the website https://smart-places.org/mobile-location-analytics-opt-out/about-mobile-location-analytics-technology/, or simply by turning off your Wi-Fi.

Please note that some mobile devices use technology that involves regularly changing their MAC address. Our opt-out system should allow you to opt out of tracking despite this MAC address change. In any case, you can prevent this tracking by simply turning off your Wi-Fi.

  1. As part of your use with our virtual assistant TILI

 

If you interact with our virtual assistant “TILI”, which is available exclusively on the website ticketlive.be, it is possible that you may communicate any personal data concerning yourself.

  • SPECIAL DATA CATEGORIES

As a matter of principle, Brussels Expo does not process special categories of personal data personal information revealing your racial or ethnic origin, political opinions, or beliefs religious or philosophical beliefs, your trade union membership, your genetic data, your biometric data, your health data, or data concerning your sex life or your sexual orientation ,without your consent.

  • NON-PERSONAL DATA

It is possible that we may also collect non-personal data.

This data is classified as non-personal data because it does not allow for the direct or indirect identification of a specific individual. It can therefore be used for any purpose whatsoever.

This includes, for example, anonymized data such as survey results.

On the other hand, if non-personal data were combined with personal data in such a way that identification of the persons concerned would be possible, this data will be treated as personal data until its linking to a particular person is rendered impossible.

  • CONSEQUENCES OF FAILURE TO PROVIDE THIS DATA

Providing some of the data mentioned above is necessary to access certain services offered by Brussels Expo, including purchasing a ticket for an event.

If the individual concerned does not provide the requested personal data, they will be unable to access the services offered by Brussels Expo.

  • LACK OF PROFILING AND AUTOMATED INDIVIDUAL DECISION-MAKING

Brussels Expo does not, under any circumstances, carry out automated personalization or individual decision-making.

  1. WHY DO WE PROCESS YOUR PERSONAL DATA? AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

 

We process your personal data for specific purposes and based on the relevant legal grounds, as shown in the following table:

LEGAL BASIS PURPOSES
Art. 6, 1., a) GDPR : The data subject has consented to the processing of his personal data. Your personal data is processed in particular for the following purposes:

–       For the purpose of our direct marketing campaigns (sending our agenda as well as our offers and promotions) to people who have not yet purchased a ticket;

–       Sending your personal data to an exhibitor at an event to whom you voluntarily showed the QR code on your access ticket.
Art. 6, 1., b) GDPR : The processing is necessary for the execution of a contract to which the data subject is a party or to the execution of pre-contractual measures taken at her request. Your personal data is processed in particular for the following purposes:

–       Ensure the creation of and connection to the customer account;

–       Manage the invoicing related to your purchases;

–       Ensure communication regarding your ticket;

–       To guarantee you access to the event and/or to one of our car parks;

–       To provide you with information related to the event;

–       In general, with a view to ensuring the management of the (pre)contractual relationship and everything that it implies.

 
Art. 6, 1., c) GDPR : The treatment is necessary to comply with the legal obligations of Brussels Expo. Your personal data is processed for the following purposes:

–       Compliance with applicable legislation: we may process your personal data for the purposes of risk assessment, regulatory compliance, investigations (e.g., administrative, tax, judicial, etc.), research, analysis (premises security, site access, IT security, etc.) and support. Furthermore, the processing and protection of your personal data is a legal obligation, based in particular on the GDPR;

–       Security management, in that we may be bound by security obligations requiring us to comply with internal procedures aimed at ensuring the security of sites and events;

–       In order to organize the security teams responsible for body searches, to ensure that these are carried out by an agent of the same sex as the person searched, in accordance with the law of October 2, 2017 regulating private and special security.
Art. 6, 1., f) GDPR : The processing is necessary for the purposes of legitimate interests pursued by Brussels Expo. Your personal data is processed for the following purposes:

–       In order to ensure the functioning of Brussels Expo, in its legitimate interest to optimize its organization as best as possible;

–       In order to respond to your requests and questions (particularly those related to lost items),in the legitimate interest of Brussels Expo to respond to you in the best possible way when you contact us;

 

–       In order to respond to your complaints, in the legitimate interest of Brussels Expo to be able to give the best possible follow-up to said complaint and prevent it from recurring;

–       For the purpose of direct marketing campaigns (sending our agenda as well as our offers and promotions) to people who have already purchased a ticket, in our legitimate interest to promote our services;

–       In order to produce statistical reports,in the legitimate interest of Brussels Expo to develop its overall strategy and improve its services ;

–       In order to send the gift card to the recipient, in the legitimate interest of Brussels Expo to respect what has been agreed with the purchaser of the gift card.

 

–       In order to manage crowds at an event using Wifi/visual sensors, and in the legitimate interest of Brussels Expo to improve the quality of the event,ui-ci ;

–       In order to ensure the defense of our interests in court, in the legitimate interest of Brussels Expo to exercise or defend its rights in court;

–       In order to ensure security, including the security of our sites, our events, IT security, etc., in the legitimate interest of Brussels Expo to ensure you have an optimal experience;

–       For the purpose of satisfaction surveys following an event, in the legitimate interest of Brussels Expo to ensure the proper execution of its services and to find out about any potential areas for improvement;

–       In order to ensure the use of our virtual assistant “TILI”, available only on the website ticketlive.be, in the legitimate interest of Brussels Expo to offer you an effective and relevant chatbot;

–       In order to ensure, through our independent consultants, the necessary communication between Brussels Expo, its clients and its suppliers for the smooth running of the organization and management of events.

Regarding processing based on this legal basis in pIn particular, we always ensure that there is a balance betweenyour rights and interests and those of Brussels Expo.
Non-treatments

still under consideration

 Brussels Expo may need to carry out processing that is not yet provided for in this Policy.

In this case, we will contact you before any reuse of your personal data to inform you of the processing not yet envisaged and to give you the possibility, if necessary, to refuse it.

 

  1. WHO HAS ACCESS TO YOUR PERSONAL DATA?

 

We undertake not to share your personal data with third parties except as necessary to achieve the purposes stated above. In this regard, we may share your data with our subsidiaries, procesors, the police, or our direct partners whose involvement is necessary to achieve the aforementioned purposes.

  • INTERNAL RECIPIENTS

Access to your personal data is strictly limited within Brussels Expo, specifically to the following individuals:

  • Authorized personnel from the Marketing & Ticketing department, particularly for managing your tickets;
  • Authorized personnel from the Entertainment department, particularly with regard to the promotion of our services;
  • Authorised persons from the Operations department, particularly with regard to the organisation of events, security management and the management of the IT infrastructure of Brussels Expo;
  • Authorised persons in the Legal department, particularly with regard to the protection of Brussels Expo’s rights in court and compliance with applicable legislation.
    • EXTERNAL RECIPIENTS

As part of our activities, we may sometimes share your data, particularly with the following recipients:

  • The organizer of the event for which you purchased a ticket. This organizer is also responsible for processing your data. We only share your data with the organizers of the events for which you have purchased a ticket and provide you with the organizer’s privacy policy at the time of collection, when available.

Furthermore, when Brussels Expo collects personal data at the request of an event organizer, beyond what is necessary for ticketing purposes, Brussels Expo acts as a data processor on behalf of that organizer. In this case, and as previously stated, Brussels Expo only processes this data on the organizer’s instructions. We encourage you once again to consult the privacy policy of the relevant organizer for any information regarding this data processing.

  • The exhibitor of the event to whom you presented the QR code on your access ticket, in order to facilitate contact with the exhibitor. This exhibitor is also responsible for processing your data;
  • Our processors and external service providers whom we use to organize our business. These companies only process your data on the basis of our express instructions and their access is limited to the data they strictly need to perform their tasks.
  • Our external DPO, regarding the management of your requests to exercise rights and in the event of a personal data breach.

It is also possible that Brussels Expo may be required to disclose some of your personal data to authorized third parties, particularly when legal provisions, a court order, or an order from a public authority make such disclosure necessary. This may include disclosure to the following third parties: judicial or governmental authorities, institutionsbanking services, police services, bailiffs, etc.

  • DATA STORAGE AND TRANSFER

Your personal data is hosted by Brussels Expo, which may itself use a qualified processor with servers located within the European Economic Area (EEA).

These hosting solutions offer security measures to guarantee the confidentiality, availability, and integrity of your data. The chosen processor also commits, under the same conditions, to performing or having performed a backup of your data in a manner that guarantees its security and integrity, and protects it from any potential server failures.

None of your personal data is transferred to third countries located outside the European Union or to international organizations. Should this become the case, we undertake to take appropriate security measures to ensure a sufficient level of protection for your personal data.

  1. HOW LONG DO WE KEEP YOUR DATA?

Your personal data is kept for as long as necessary to achieve the purposes for which it was collected and, in any case, until the expiry of the mandatory legal retention periods, in particular in tax and accounting matters and until the end of the limitation period for contractual liability.

Your data will be deleted when:

  • They will no longer be necessary for the intended purpose; or
  • You have validly exercised your right to erasure; or
  • You withdrew your consent when the processing is based on the lawfulness of said consent.

 

We detail in the table below some specific legal bases and the data retention periods in relation to these bases.

ACTIVE DATABASE ARCHIVING INTERMEDIATE DATABASE ARCHIVING JUSTIFICATION
Data related to contractual and pre-contractual management
Throughout the duration of the contractual or pre-contractual relationship 10 years from the end of the contractual relationship In accordance with the statutory limitation period (art. 2262bis of the former Civil Code).
Data related to compliance with legal obligations
According to the retention periods stipulated by the various legal provisions According to the archiving periods stipulated by the various legal provisions In accordance with the various legal provisions to which we are bound.
Data related to the promotion of our services
Throughout the duration of the relationship (contractual or pre-contractual) with the data subject, provided that they have not withdrawn their consent or objected to the processing of their data for this purpose. 3 years from the last contact, unless the data subject has previously withdrawn their consent or objected to the processing of their data for this purpose. In accordance with the recommendations of the CNIL (French data protection authority)

 

  1. WHAT SECURITY MEASURES ARE IN PLACE TO PROTECT YOUR PERSONAL DATA?

We have put in place the organizational, technical and physical measures necessary and proportionate to the risks of violation of your rights and freedoms in order to best protect your personal data against unauthorized access, loss, destruction or alteration.

Our security measures are regularly assessed and adapted to ensure a consistently high level of protection.

We have put in place internal access control procedures to limit access to your data to only those people whose involvement is necessary to achieve the purpose of the processing.

  1. WHAT ARE YOUR RIGHTS?

We make every effort to ensure that your rights regarding your personal data are respected.

For this purpose, you have the following rights, under the conditions defined by applicable regulations, and in particular the GDPR:

  • The right to withdraw your consent to the processing of your personal data at any time for purposes based on said consent (right to withdraw consent) ;
  • The right to obtain from Brussels Expo confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and several pieces of information about the processing (purposes of the processing, categories of personal data concerned, recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, or, where this is not possible, the criteria used to determine that period, etc.) (right to information And right of access) ;
  • The right to obtain from Brussels Expo, as soon as possible, the rectification of personal data concerning you that is inaccurate or incomplete. If we have made your data accessible to other entities, we are obligated to take all necessary steps to inform these entities of your request for rectification (right of rectification) ;
  • The right to obtain from Brussels Expo the erasure, as soon as possible, of personal data concerning you where this is provided for by applicable legislation. If we have made your data accessible to other entities, we are obligated to take all necessary steps to inform these entities of your request to be forgotten (right to erasure) ;
  • The right to obtain from Brussels Expo the restriction of the processing of your data to mere storage where this is provided for by applicable legislation. If we have made your data accessible to other entities, we are obligated to take all necessary steps to inform these entities of your request to restrict processing (right to restriction of processing) ;
  • When the processing of your personal data is based on your consent or on a contract and is carried out using automated means, you have the right to request to receive this data in a structured, commonly used and machine-readable format. You can also request that this data be communicated to another data controller (right to portability) ;
  • The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (right not to be subject to an automated individual decision) ;
  • The right to object at any time to the processing of personal data concerning you for marketing purposes, including profiling to the extent that it is related to such marketing (right to object).

Please note that even in this case, in the context of a balancing of your interests and our interests, our interests or fundamental rights and freedoms may prevail and justify our processing of your data on the basis of our legitimate interest despite your objection.

  1. HOW TO EXERCISE YOUR RIGHTS?

You can exercise the rights described above free of charge by contacting our Data Protection Officer (DPO), the law firm Lex4u, represented by Mr. Frédéric Dechamps, available at the following address: [email protected].

Your request must specify the right(s) you wish to exercise. We may ask you to provide proof of your identity for security reasons, to prevent unauthorized disclosure or misuse of your personal data.

We will then have one month from the date of receipt of your request to respond. This period may be extended by two months, depending on the complexity or number of requests. If applicable, this period can only be extended if you have been informed and the reasons justifying the delay have been communicated to you.

In the event that we decide not to grant your request, we will inform you of the reasons for our refusal or inaction.

 

In the event of manifestly unfounded or excessive requests, particularly due to their repetitive nature, we may:

(i)require payment of reasonable fees that take into account the administrative costs incurred in providing the information, making the communications, or taking the requested actions; or

(ii) refuse to comply with these requests.

It is our responsibility to demonstrate that your request is manifestly unfounded or excessive.

  1. QUESTIONS, CLAIMS OR COMPLAINTS

If you wish to comment on any of the practices described in this Policy, you are advised to first contact our DPO: the law firm Lex4u, represented by Mr. Frédéric Dechamps, available at the following email address:[email protected].

You can also contact the Data Protection Authority (hereinafter, the “APD“) if you are not satisfied with the processing of your personal data by Brussels Expo, using the following contact details:

Data Protection Authority

Rue de la Presse, 35

1000 Brussels

Tel. +32 2 274 48 00

Fax. + 32 2 274 48 35

[email protected]

 

All information on this subject can be found on the APD website:

  1. POLICY UPDATE

This privacy policy may be modified at any time to comply with applicable laws. The applicable version of the privacy policy is the one in effect on our website:https://www.brussels-expo.com We therefore advise you to consult it regularly.

Date of last update: 23/07/2026

Ne manquez aucune actualité de Ticketlive. Abonnez-vous pour rester informé des évènements à venir.

Stay updated with TicketLive. Subscribe to stay informed of upcoming events.

Blijf op de hoogte met TicketLive. Abonneer u om op de hoogte te blijven van aankomende evenementen.

TicketLive 2026. All rights reserved.

Design & Development / Digital Master

MENU